Pls. regard this as placeholder for information.
Namely I don't give the info in here yet.
I just identify the files with the info. I have to be away for a day or two, as I have other things to do.
If I didn't do that in this fashion, someone could say I created the videos and invented things. But like this, noone can try and say so.
Still, you don't need to delve into this introduction, other than have a look at places I point to from here. And as much as about this topic, come back in at least two more days, and I will too, God willing.
So...
I am posting this here, because I had not so great experience elsewhere on the Forums, most notably here:
http://forums.gentoo.org/viewtopic-t-905472.html
("System attacked, Konqueror went on window-popping spree!")
and that's Networking & Security in earnest there, where this here topic should belong as well, but I don't want to impose my problems and my views with so little support on anyone!
Actually I have even tried in vain to contact eff.org:
https://www.eff.org/ (point them over here someone, if you please!)
but it wasn't feasible for me to contact them. I am censored, and badly, in the first place by my own neocommunist goverment in my country Croatia.
But I was saying I tried to reach eff.org and get their opinion on SELinux being a ploy by Eavesdropper NSA imposing it's devices on the whole of the world of Linux.
I mean just get enough holes in the Linux kernel for their programs to plug into... Suffices for them, doesn't it?
And I just can't believe so few people are opposing the orwellian scenarios that the governments in general lead us, the common public worldwide, into, and esp. the now nearly-all-muscles-and-fraud US American state (EU is not any at all better wrt. fraud, militaristically it is more in the wishes though)...
But that wasn't what I was about to write about.
I was about a concrete attack, or what I deem to be such, that I suffered and captured in Wireshark (not that I understand it yet, but with some help of some expert activists who possibly understand, we could all understand, couldn't we?), and that I captured in screencasts, ffmpeg, my old friend ffmpeg's screencasts.
Here it is:
https://secure.vimeo.com/56006410 (in my Tor browser, where just the text)
http://vimeo.com/56006410 (for my youtube-dl once it is up, I guess)
(you shoud get it in 960x720 resolution; if you don't, thay didn't do what they said they would, because I uploaded that video in 1440x1080, and they said they would show it in 960x720 resolution)
I didn't give that video a title yet (it might have one for later readers, sure, by their time of reading this).
But I can say it is just a preparation, and the preparation is important in the sense that it shows indisputably that what I will talk about, even though I don't have time to do it today, because I really have to be away as soon as I post the preparations themselves, of which the video above is one public part, the other public part is this posting that you are reading.
These two are complimentary.
Text is best in some, and video (screencast) in other aspects.
Wireshark capture is currently only if I get any help, I can't learn Wireshark in little time I have while this topic evolves, hopefully...

How come the world didn't end? Didn't Mayas prophesized it ought to have, a few days go?

Never mind.
I just spent about a day trying to figure out what I really got.
And in the process, because I was completely away, and I don't have subliminal Linux-cog's-and-wheels in my head, but have to work hard for what some people (the gifted ones) make in a breeze...

And in the meantime I find that in the slow hurry that earnestly working people of avarage talent and a lot of wish envolve in to do things...

In the meantime I find that I probably gave just enough identification, but really only just enough to be able to demostrate now (and if need be prove later) that:

while I started and sustained on my system these:

Code:

eix-sync && layman -S; emerge -qavtuDN --keep-going @world

it could not have been my own invention, but that there happened a possible real intrusion by, as some would have it,
monkeys from space (
those that write Bibles, pls. see what I mean by those monkeys here:
http://forums.gentoo.org/viewtopic-t-905472.html#7189918
)
and that the code was possibly given under into my running emerge, but emerge, as good daughter of GNU doctrine, refused the code...

Part of this time that I studied what I got, I was able to diagnose some probable issues, and some came up clear to my understanding only at about very small number of hours ago.

But let's first show how I got only barely sufficient identification to maybe get someone (much more) knowledgeable (than me she/he must be) to take a deeper look into the matters, which might turn out to be very evident...

I got only barely sufficient identification, because of own insufficiency as I described my avarageness a few paragraph before here.

Because I should also have given these that are missing from the algos given in the post nine days ago, and I didn't give'em, dear God:

Code:

cf0f6b2bac1153e34d6ef55ee3851479b347d2b5c191fda8ff6a51fab5291ff4 GeoIP-1.4.8.tar.gz
5f7bc13a01779c846f4c721f2294a31614b7ffbce35d591367e1fd7498164a10 GeoIPASNum.dat.gz
20f50a6af4ba4ce4902224b2672f66a0c35eb497904e737c4b888b1820b19603 GeoIPASNum.dat.gz._checksum_failure_.nDb0_p
b34a630eda040d9717c6a483f05a1dac7d84d52b1ead6a51a4b3d21da42a9115 GeoIPv6.dat.gz
75f63ca4db6909b01ece94e3462048eb2a836f67b9d09548443d45294a938d52 GeoIPv6.dat.gz._checksum_failure_.UWs0Xx
7c3bcf47073105977cbbc3c3a78eaa19a6f6330e45087385de4bcb78001cd82f GeoLiteCityv6.dat.gz._checksum_failure_.IWtpcI
### as already given in the first post on 2012-12-20 ### Screen_121219_2358_at8-g250.avi
### as already given in the first post on 2012-12-20 ### Screen_121220_0959_at8-g250.avi
### as already given in the first post on 2012-12-20 ### ws_121220_0819.ws
### as already given in the first post on 2012-12-20 ### ws_121220_0916.ws

Explanation on what C1220_at8-g250_XXX.dd are is due here.
The entire root, / (one filesystem), and it contains all that is not "user data", of my system, containing /usr /var and all, except the /boot partition, is contained in the:

Code:

C1220_at8-g250_md1.dd

file.
The /boot partition itself, because it is on a separate device than /, is contained in the:

Code:

C1220_at8-g250_sda2.dd

The naming? 'C' is my shorthand for 2012, just like 2011 was 'B' 2010 'A', and, you guess now, it is so because 2009 was 9 and 2008 was 8, and because I ran out of options to keep the naming consistent and orderly otherwise.
I get these dd-files (as I call them) by doing the following on the devices, in the case of / it was raid5 (built on top of 3 disk partitions), and in the case of boot, it is a simple 500M ext3 partition just after the EFI partition, as gdisk's author Rod Smith teaches us to do, I get these dd-files by doing, on the said unmounted devices, the following:
dd if=/dev/md1 | gzip -6c | dd of=C1220_at8-g250_md1.dd
dd if=/dev/sda2 | gzip -6c | dd of=C1220_at8-g250_sda2.dd
And the sha256 algos above identify these dd-files uniquely forever and longer (unless they invent a fifth demension or something).

I don't have the system in the state it was back then when the possible (attempted) intrusion through this weird looking GeoIP downloads happened, no. I need the system to work for me and not in a glass window.
But those two files above got my entire Gentoo install cogs'n'wheels!

These were copied over for perusal from that system, after attempted reboot (
which failed inasmuch as udev didn't start, but it failed so for other reasons, see here which:
http://forums.gentoo.org/viewtopic-t-934678.html#7210608
)
, these were taken out of that system that is now immortalized in those dd-files...

Sadly, after quite a lot of censorship on me from the current regime in what ought to be my own Croatian state, but is a neo-Bolshevik neo-yugoslav regime run by remnants of Tito's killers' sons and honey-talk liers and fraudsters of the kind that fit into any kind of corrupt goverment... Sadly after friends exiled from the country else they would probably have died in prison... Sadly after my finances having been ruined by court conviction that had me on parole from prison (if those are the right words, not native speaker me: four months jail was the regime's threat on myself for two years), and the finances, all of my share of my parents heredity, are now mostly gone because the conviction made any work with my NGO Croatia Fidelis impossible, notwithstanding that it had previously been approved by Croatian government institutions on my NGO Croatia Fidelis which I founded and invested in...
Sadly after all that, I sometimes overreact or draw wrong conclusions at first, or don't manage to keep my calm to do the right things...
So that video I had to trim for your viewing, to get the relevant info out.
This is how I did it.

Code:

# cat ls-1_V
Screen_121220_0959_at8-g250

That'll turn the "$i.???" in below code into Screen_121220_0959_at8-g250.avi and then the command issued will use ffmpeg to produce a fine 1440x1080 HD video more suitable for viewer with good monitors to view it on:

But, as I said, I needed to cut my useless ramblings and leave those that I believe are in place, yes I do.
I achieved that through a lot of measuring of the exact places where to cut the video, and settled IIRC, for this:

and hit Enter.
And we get a 5:53 minute video (which is the first 5:53 of what you'll hopefully, hopefully!, read on, be able to watch from CroatiaFidelis.hr and from Vimeo.com).
But I want to prove that I made that video from the file I said I made it from and gave algo identification of it!
So I'll add to the video what will demonstrate that I am speaking the truth. At least I'll try to do so.

I have made a script to play it on the original, sha256-identified avi file that I edited in the above way.
But two warnings first.
The avi screencasts files (takes a lot of those to get symptoms of intrusion photocast!, hunting or fishing must be like this!, alert all the time, and a lot of non-sight/non-bite walks/waits) but I was saying the avi screencasts files I make with this command:

They can't be done seek upon to such precision as I was able to cut the 1440x1080 mkv file, because the preset for them is ultrafast, no such nuances in themselves are really feasible as in the h264/aac second ffmpeg product, which is done with the option "-g 10" that makes it comfortable for seeks up to around 0.1 s.
Also, the second line to play is the longest and to not make too long a video, I'll somewhat skip through it. I gave only to it, for playing, also the option "-osdlevel 3" to know where I am at play of it. The other legs play without skipping.
And also to not make video too long, I'll play it 3 times faster.
This is the script play.sh:

So I first check the sha256 sum of the file and then play the legs that I made the first 5:53 minutes out of.
I'm writing this long hours after. Made all, and more.
But now you know better what I wrote up to this later time than me, so much it took to make it (but I know now again that I read it over and made corrections).
The video is ready, and I will try and post it to Vimeo.com and to CroatiaFidelis.hr, you'll probably understand clearly why to both.

A cautious alert for my sake here.

Currently, and it is the situation that began on 2012-12-15 (December 15th 2012.) at 22:37 hours, Google Croatia (doesn't deserve the Croatian name, but administratively that is the section of Google's people who are responsible for my case) have effectively banned me from:

my Youtube account, and please take notice that I have nearly five hundred (500) videos there, probably some two hundred hours (200 hours), and about four hundred and fifty thousand (450,000) views registered at Youtube ("registered" in Youtube Croatia, not deserving the Croatian name, means "doctored", as Youtube regularly allow regimes to falsify numbers of views, and in censored authors like me, numbers of views are in precise items and for precise reasons kept way below the true viewings

my Google mail account, where it is most probable that a lot of people are wondering why I don't reply to their mails

Croatian-News Google group (some English there too) where attacks have been tailored and any attempt of mine to claim free speech and free sending of information have been rudely and brutally, in their wishes, concocted and launched

They have effectively banned me from the above by conditioning my access to my data and my exercize of my rights as human, with giving them authorization to use my mobile phone to... to nag, pester and molest me, the G-bullies from Google Croatia (which regional Google does not deserve the Croatian name).
Which I am not giving to them, and you guess why!
Don't try to guess if you crawl before authorities, because then you can't understand.

But the cautious alert is soon to be expressed explicitly a wee little bit further, so read on.

Yesterday they, because it's central, it's obviously, apparently and visibly central, yesterday they, the regime bearing Croatian name but not deserving it, and they got completely free hand on Yahoo Croatia (undeserving of the Croatian name) to trample on dissenters to their heart's content, only yesterday I was blocked, no repeated attempt in hours got me back free to, from sending e-mails from my Yahoo account as well.

I can configure mail from my CroatiaFidelis.hr space which I rent from local hosting www.Plus.hr. I don't think they are desireous of censoring their clients, but they can't send mails over censorship walls, nor can they receive mails for me which they don't... receive...
Try, anybody, and write to me to:

Code:

miro.rovis@croatiafidelis.hr

But I was saying, if I even disappear, as some of my friends have, not many, but they did vanish from public inadvertently to the public...

But I don't think it's killing time yet... But killing time was most cruel for Croatian people when Croatia was rendered smaller in its population, decimated and worse while having been engulfed by second yugoslavia in 1945. Three hundred to five hundred thousand Croats were slaughtered mercilessly by Tito's partisans and probably around as many fled for their lives out of Homeland. And we are currently a much smaller nation of not much over four million people.

The problem is that the killers' sons of the 1945. killing spree on my people, traitors of our descent and occupiers from our East, are ruling my Nation's State of Croatia of this our time.

I hope on the part of Gentoo users who read me, for some support, not much else than an ear lended on the history and the regime, really.

I hope on the part of you Gentoo users who read me, some heart in the way of GNU Linux, the desire for freedom from government surveillance...

What happened to you, esp. you, the U.S. Americans? Your own state is turning into a survaillance and censorship nightmare! Do you, readers who get me, intend to sleep as if others will solve your problems? just like my Croats do?

Say a prayer, in your own religion, Christian, Muslim, Buddhist or any of the other ones, for my Nation (not so much for me), and for the U.S.A. and for the world, because...

I hope, I really don't know that I will but I hope that I will be back in an hour or so, to post the link to the video that I just explained that I made, and described how I made it.

Pls. do so. Thanks anyway, but pls. don't read on at all.
Do this: unselect
"Notify me when a reply is posted" where appropriate. And thank you for that!

The following is not for the dude I quoted and replied to above.

As I wrote, but sure people don't believe without having pictures of things. And the pics this time are incomplete yet, on top of being hard to understand, in part.
And in the other part, the pictures are, for now, missing.
(of Google not letting me in without officially owning my mobile phone contact to be able to use it for the known Google purposes... Don't forget they stole all people's emails correspondence, through wireless, while roaming streets and taking pictures.
I have almost no mail service for contacting people in Croatia currently.
I am effectively banned from anything Google owns (pls. see above). And it doesn't end there.

I think I have it. The strange intrusion is an anal probe, by the grey alien in the conservatory. And by anal probe I mean buggery, by grey alien I mean illegal immigrant and by conservatory I mean mirroR's underground bunker.

Underground bunkers are useful for many purposes, though. For example, when they send in the IRS paramilitary operatives to collect your taxes, you can make it a negative ROI operation, costing more to carry out than they will recover from you._________________Deja Moo: the feeling that you've heard this bull before

Underground bunkers are useful for many purposes, though. For example, when they send in the IRS paramilitary operatives to collect your taxes, you can make it a negative ROI operation, costing more to carry out than they will recover from you.

Hitler agrees with this post from his home as a brain in a bubbling tank. Fritzl "likes" it too from his arse smuggled iPhone Facebook app.

The first rule of underground bunkers is "make a well-hidden escape tunnel". Even the ancient Hebes knew this, although the guys who built Masada apparently didn't get the memo._________________Deja Moo: the feeling that you've heard this bull before

As one of the resident recovering nutbars, I would like to encourage the original OP to seek out the opinion of a psychiatrist, possibly in a different country if the current country doesn't appreciate the highly creative outline of their nefarious activities.